[Frontend] Support custom Secret Detection profiles in existing UI

designs: Design: Advanced Configuration Profiles management (gitlab-org#23403)
prototype: https://security-coverage-prototype-0b2bbb.gitlab.io/security-inventory-profiles/#/security-configuration/enable-scanners

• ✅ Add a section in the modal (see designs) with title Advanced configuration, description Settings passed to the analyzer that override its default behavior., and a table with columns Variable and Value showing the custom fields
  • Show advanced configuration section in scan pro... (!253831 - merged)
  • Add a variable table to each scan trigger card (!256418 - merged)
• ✅ Add a badge next to each profile in the dropdown (see prototype) reading GitLab or Custom
  • Add source badges to scan profile dropdowns (!252954 - merged)
  • Keep scanner card selected when choosing a profile (!253699 - merged) 😬
• ✅ Ensure that the default profile always shows first in the dropdown
  • Sort recommended scan profiles first (!252952 - merged)
• ✅ Late-stage tweak: badges should show the root group's name
  • Name the owning group on scan profile badges (!256675 - merged)
  • Name the owning group in the bulk scanners drawer (!256704 - merged)
• ✅ Show all attached profiles for a project instead of just the first one (#631608 (comment 3940331781))
  • Show every attached scan profile on the project... (!259155 - merged)
  • Show every attached scan profile on the group s... (!259229 - merged)

---

pre-spike description

• Spike — create a custom Secret Detection profile via GraphiQL with configurable_security_scan_profiles on, then walk every surface that renders profiles plus the wizard apply path
  • Fix must-haves here, file nice-to-haves to #624194
  • Surfaces, under ee/app/assets/javascripts/:
    • security_configuration/components/enable_scanners_wizard/{select_scanners,review}.vue
    • security_configuration/components/scan_profiles/{group_scanners_overview,scanner_details,source_cell,scan_profile_configuration}.vue
    • security_inventory/components/bulk_scanners_update_drawer.vue
• Known must-haves
  • Make sure that the default profile appears first in any dropdowns
  • Badge recommended vs custom in the wizard dropdown — gitlabRecommended is already in scan_profile.fragment.graphql
• Show configuration in scan_profiles/scan_profile_details_modal.vue
  • Extend the query to triggerSettings { configuration { ... on SecretDetectionConfiguration } }
  • Render read-only: secure_analyzers_prefix, image_suffix, historic_scan, log_options, excluded_paths, ruleset_git_reference — closed schema, so that is all of them
  • Hide the section when the resolved configuration is empty